$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa File: f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa (raw, json) Hash identifier: VM/pZYYcZimDWVl/WWcZRghttwJ0vfbKBQxSc2+gPSA= Subject key identifier: 4E:E1:31:C5:97:83:1A:DA:0C:B0:60:3B:1F:D1:03:5A:D4:3D:62:A4 Certificate issuer: /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Certificate serial: 010D0C9F4328584CC565F742DE1AF6439F5BD6A0 Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa Signing time: Fri 06 Feb 2026 08:14:20 +0000 ROA not before: Fri 06 Feb 2026 08:14:20 +0000 ROA not after: Thu 07 May 2026 07:14:20 +0000 asID: 401578 IP address blocks: 142.248.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c5:65:f7:42:de:1a:f6:43:9f:5b:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Validity Not Before: Feb 6 08:14:20 2026 GMT Not After : May 7 07:14:20 2026 GMT Subject: CN=e7e483cc-d047-43dd-8843-540e6d6550fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:71:01:ea:3a:13:ae:fb:83:5a:8d:12:11: 6a:ab:a8:05:09:cb:08:c1:c2:61:cb:0a:04:7b:63: 72:3c:4e:25:5a:37:6b:52:63:d7:7a:53:4d:82:24: 0d:6c:25:ba:f1:5b:35:f6:50:f0:8c:3d:fb:aa:81: 3d:89:78:40:9a:e2:bc:98:57:5e:1f:1e:4a:c8:7b: 8f:84:d4:9f:e6:75:7e:ef:c0:64:5d:3a:3c:c1:da: 18:91:bc:87:3e:d2:5e:24:8c:46:a8:86:ec:ca:6a: da:51:aa:b1:c5:68:8e:a2:9a:ba:cb:0a:b4:ba:4f: 80:f5:fe:18:db:48:3d:da:20:1a:19:61:54:e7:0d: ec:92:ed:12:73:4c:b1:aa:76:ed:d7:bc:db:c8:1e: dc:e9:67:4e:f4:01:06:d9:51:d2:d4:6a:dc:48:6a: 67:5f:c9:37:36:5e:bd:af:c7:09:ca:df:26:e9:a6: c7:b9:ff:8d:b2:7b:9b:3e:5c:86:13:d8:c2:6d:49: 25:77:d2:48:fc:96:d6:31:2e:8b:02:38:2a:5d:98: b4:6d:57:d1:d5:83:74:d5:77:be:ee:13:2f:3c:75: 80:a5:18:17:0a:fb:e3:b8:d5:00:cf:4d:c0:92:ca: a1:2f:9e:15:21:d7:85:b3:6c:1b:d7:e7:4c:5e:d9: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E1:31:C5:97:83:1A:DA:0C:B0:60:3B:1F:D1:03:5A:D4:3D:62:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl X509v3 Authority Key Identifier: keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer sbgp-ipAddrBlock: critical IPv4: 142.248.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:93:7b:e4:7e:e2:68:f8:7d:a9:a4:e7:ca:76:30:7c:91:ec: 6a:5c:b8:e3:28:d6:d5:a6:25:fd:1e:71:56:d3:33:69:41:6b: a2:51:36:8d:b3:99:7f:7a:02:1b:52:bd:98:56:af:ae:78:09: bc:64:0d:fb:d4:8d:6c:43:c0:6e:f0:96:fb:85:ea:e5:c8:70: a1:7c:09:20:ae:f1:e0:63:4a:0b:fe:fb:13:35:9f:02:fe:c9: c1:4f:bb:ae:4c:41:52:4c:11:25:8e:10:20:39:dc:7a:3c:2f: 9e:48:3d:0d:3f:a9:dd:18:6a:74:83:a5:63:33:53:4c:65:b4: 79:6d:d8:14:4d:bb:c7:68:f6:db:62:90:42:9e:b5:ff:4b:8a: 11:ee:1c:62:ef:d1:28:75:66:de:5d:76:8c:6a:05:99:b4:98: 5a:aa:04:78:cb:b9:f6:f8:37:41:fa:52:77:a5:7b:b3:6e:5a: a4:10:0e:05:6d:8c:c3:c9:38:7d:59:99:0c:87:1c:03:49:62: ce:09:e8:4c:8f:80:10:55:e9:bf:3e:f4:92:50:ed:fd:b6:de: 2a:e9:d2:da:a3:76:bb:e1:c1:c5:10:fc:1a:e9:7d:5b:2d:51: 6a:df:aa:81:8e:f6:22:e3:3b:c9:f7:4f:97:2e:df:76:8e:3e: e2:30:76:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzFZfdC3hr2Q59b1qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyM2E1ZjEtZTllNy00ZDUzLWI2MTUtZjhhZmIxN2Iy OWM1MB4XDTI2MDIwNjA4MTQyMFoXDTI2MDUwNzA3MTQyMFowLzEtMCsGA1UEAxMk ZTdlNDgzY2MtZDA0Ny00M2RkLTg4NDMtNTQwZTZkNjU1MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKhxAeo6E677g1qNEhFqq6gFCcsIwcJhywoE e2NyPE4lWjdrUmPXelNNgiQNbCW68Vs19lDwjD37qoE9iXhAmuK8mFdeHx5KyHuP hNSf5nV+78BkXTo8wdoYkbyHPtJeJIxGqIbsymraUaqxxWiOopq6ywq0uk+A9f4Y 20g92iAaGWFU5w3sku0Sc0yxqnbt17zbyB7c6WdO9AEG2VHS1GrcSGpnX8k3Nl69 r8cJyt8m6abHuf+NsnubPlyGE9jCbUkld9JI/JbWMS6LAjgqXZi0bVfR1YN01Xe+ 7hMvPHWApRgXCvvjuNUAz03AksqhL54VIdeFs2wb1+dMXtnVAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7hMcWXgxraDLBgOx/RA1rUPWKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMTIz YTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFmYjE3YjI5YzUvZjBlYmY3MDItMzAzZi0z MGFiLThiZjEtNDhmNTUwMWI5YWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTEyM2E1ZjEtZTllNy00ZDUzLWI2 MTUtZjhhZmIxN2IyOWM1L2ExMjNhNWYxLWU5ZTctNGQ1My1iNjE1LWY4YWZiMTdi MjljNS5jcmwwHwYDVR0jBBgwFoAUyW18ReNNaaWN99LTwrp4KHA8TlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMTIzYTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFm YjE3YjI5YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISTe+R+4mj4famk58p2MHyR7GpcuOMo1tWmJf0ecVbTM2lBa6JRNo2z mX96AhtSvZhWr654CbxkDfvUjWxDwG7wlvuF6uXIcKF8CSCu8eBjSgv++xM1nwL+ ycFPu65MQVJMESWOECA53Ho8L55IPQ0/qd0YanSDpWMzU0xltHlt2BRNu8do9tti kEKetf9LihHuHGLv0Sh1Zt5ddoxqBZm0mFqqBHjLufb4N0H6Unele7NuWqQQDgVt jMPJOH1ZmQyHHANJYs4J6EyPgBBV6b8+9JJQ7f223irp0tqjdrvhwcUQ/BrpfVst UWrfqoGO9iLjO8n3T5cu33aOPuIwdpM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:45:12 2026 by rpki-client